Skip to content

v1.0.2 - WordPress.org Review Fixes

Choose a tag to compare

@MoW187 MoW187 released this 04 Jul 08:19
· 3 commits to main since this release

This release addresses all initial feedback from the WordPress.org plugin review team, aligning the plugin with modern coding standards, translation practices, and security guardrails.

Key Changes in this Release

  • Security Updates: Added defense-in-depth direct file access checks (ABSPATH) to all PHP files and added capability checks (manage_options) to admin options page rendering.
  • Dynamic Styling Optimization: Refactored dynamic custom CSS generation to use the standard WordPress function wp_add_inline_style() instead of manual stylesheet outputs in wp_head.
  • Modernized Translations: Cleaned up translation loading by removing the deprecated manual load_plugin_textdomain() calls, deferring translation tasks to the modern WordPress.org automated translation engine.
  • HTML Support in Banner Message: Enhanced the public cookie banner template to use wp_kses_post() instead of esc_html(), allowing website administrators to safely insert links (e.g., privacy policy pages) in the banner message.
  • Disclosure: Added an == External Services == section in readme.txt to clearly document that script matching patterns (e.g., Google Analytics, Facebook Pixel) are used solely to block them on the client side until consent is granted.